How are rights granted if a user is in multiple groups?
For configuring resources (roles / access / modules / features), users in multiple groups are granted rights on a Most Restrictive basis. That is, if a feature is revoked from the user in one place, it’s gone everywhere.
For configuring Information Resources (e.g., universes, documents), granting is done on a Least Restrictive (or “most favorable”) basis. That is, if you are granted a universe in one group, you have it everywhere – even if you are in another group where that universe is not available.
Anita Craig 
(BOB member since 2002-06-17)